By continuing to browse or by clicking "accept all cookies," you agree to the storing of first- and third-party cookies on your device to enhance site navigation, alalyze site usage, and assist in our marketing efforts.

Privacy Policy

Canvas has open security.

And no, that’s not an oxymoron. it’s more like “oxygenius.”

Tell us about a security issue.

Email us about vulnerabilities at (If you want, you can use our public key.)

Read the latest security notices.

Once we learn about a security issue, we’re totally open when it comes to making sure you know what we know. Visit the Canvas Help Center to learn about security threats and to see how we fixed them.

Review our annual, open security audits.

See for yourself which LMS vendors conduct open security audits (hint: there’s only one) and learn more about how our relentless obsession with openness means good things for the security of your data.

  CanvasCanvas BlackboardBlackboard Desire2LearnDesire2Learn Moodle RoomsMoodleRooms
2011 No No No
2012 No No No
2013 No No No
2014 No No No
2015 No No No
2016 No No No
2017 No No No
X Close

Canvas Security Overview

Automatic updates

We automatically install security patches as soon as they’re available, so right now (whenever that is), Canvas couldn’t be more secure.

Data access

The Canvas API uses the industry-standard OAuth2 protocol, which provides secure access to Canvas data while preventing direct access to Canvas databases.


Canvas supports external identity providers (IdPs), including Active Directory, CAS, LDAP, OpenID, and SAML/Shibboleth.

Physical security

All Canvas user data is stored in highly stable, secure, and geographically diverse Amazon Web Services (AWS) data centers.

Protocol and session security

To ensure the privacy and security of your data, Canvas uses HTTPS for all communication and encrypts all inbound and outbound traffic using 128-bit TLS/SSL.

Backup and recovery

Canvas data is backed up redundantly (every day). In case of emergency or disaster, data is recovered from Amazon servers or from our own off-site backup.

Forms validated with reCAPTCHA and subject to Google Privacy & Terms

Canvas Regions × United States and Canada Latin America Brazil United Kingdom European Union Austria, Germany and Switzerland Hong Kong Australia and New Zealand